|
cve-2026-62078
|
6.5 (v3.1)
|
WordPress Premium Addons for Elementor plugin <= 4.11.…
|
Leap13
|
Premium Addons for Elementor
|
2026-09-30T12:26:46.872Z |
2026-09-30T13:17:02.953Z |
|
cve-2026-27371
|
7.1 (v3.1)
|
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross…
|
WPFunnels
|
WPFunnels
|
2026-09-30T12:26:46.112Z |
2026-09-30T13:17:02.664Z |
|
cve-2026-27085
|
2.7 (v3.1)
|
WordPress Astra WordPress theme theme <= 4.13.12 - Con…
|
Brainstorm Force
|
Astra WordPress Theme
|
2026-09-30T12:26:45.369Z |
2026-09-30T13:17:02.530Z |
|
cve-2026-95616
|
|
Apache WSS4J: Unauthenticated denial of service via in…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T12:25:28.399Z |
2026-09-30T13:17:31.672Z |
|
cve-2026-103321
|
8.3 (v4.0)
|
MISP Stored Cross-Site Scripting (XSS) via Unvalidated…
|
MISP
|
MISP
|
2026-09-30T12:19:01.829Z |
2026-09-30T12:44:22.064Z |
|
cve-2026-103115
|
|
OS4ED openSIS-Classic Student Search CustomFieldsFnc.p…
|
OS4ED
|
openSIS-Classic
|
2026-09-30T12:15:12.251Z |
2026-10-02T16:12:22.091Z |
|
cve-2026-92899
|
|
Apache WSS4J: UsernameToken replay protection bypassed…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T12:02:41.497Z |
2026-11-06T18:14:17.192Z |
|
cve-2026-74865
|
9.2 (v4.0)
|
Authentication Bypass in sogo_yhn
|
YunoHost-Apps
|
sogo_yhn
|
2026-09-30T12:02:40.553Z |
2026-09-30T12:50:23.238Z |
|
cve-2026-74864
|
9.3 (v4.0)
|
Authentication Bypass in sogo_yhn
|
YunoHost-Apps
|
sogo_yhn
|
2026-09-30T12:02:29.340Z |
2026-09-30T12:50:52.363Z |
|
cve-2026-92121
|
|
Apache WSS4J: WS-SecurityPolicy signature checks skipp…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T12:01:55.697Z |
2026-09-30T19:51:55.272Z |
|
cve-2026-89238
|
|
Apache WSS4J: WSS4J EncryptedHeader child confusion ca…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T11:59:09.820Z |
2026-09-30T19:50:20.299Z |
|
cve-2026-88920
|
|
Apache WSS4J: SAML Sender-Vouches Authentication Bypass
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T11:58:00.040Z |
2026-09-30T19:48:53.545Z |
|
cve-2026-87830
|
|
Apache WSS4J: Streaming WS-SecurityPolicy validation m…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T11:57:01.017Z |
2026-09-30T19:47:41.782Z |
|
cve-2026-85532
|
|
Apache WSS4J: Insufficient Validation of Derived-Key P…
|
Apache Software Foundation
|
Apache WSS4J
|
2026-09-30T11:55:53.392Z |
2026-09-30T19:46:00.962Z |
|
cve-2026-103242
|
7.1 (v3.1)
|
Rpm: heap-based buffer overflow write in hex2binv() vi…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-30T11:50:32.039Z |
2026-11-06T07:39:50.256Z |
|
cve-2026-62146
|
7.8 (v3.1)
|
Cri-o: cri-o: sandbox state poisoning via pod annotati…
|
Red Hat
|
Red Hat OpenShift Container Platform 4.16
|
2026-09-30T11:49:20.363Z |
2026-10-30T15:29:27.031Z |
|
cve-2026-10726
|
6.8 (v4.0)
|
Cato Windows SDP Client arbitrary file disclosure due …
|
Cato Networks
|
SDP Client
|
2026-09-30T11:38:31.821Z |
2026-09-30T14:27:30.258Z |
|
cve-2026-10739
|
8.5 (v4.0)
|
Cato Networks SDP Client for Windows is vulnerable to …
|
Cato Networks
|
SDP Client
|
2026-09-30T11:37:50.648Z |
2026-09-30T14:27:57.307Z |
|
cve-2026-103012
|
2 (v4.0)
|
Claude Code selected an API key stored by Claude …
|
Anthropic
|
@anthropic-ai/claude-code
|
2026-09-30T11:30:38.308Z |
2026-09-30T14:28:45.094Z |
|
cve-2026-103114
|
|
OS4ED openSIS-Classic Assignment Management Endpoint A…
|
OS4ED
|
openSIS-Classic
|
2026-09-30T11:15:08.987Z |
2026-09-30T13:47:09.418Z |
|
cve-2026-76992
|
8.7 (v4.0)
7.5 (v3.1)
|
Uncontrolled Memory Allocation in CODESYS Gateway Client
|
CODESYS
|
Development System 3
|
2026-09-30T11:07:45.751Z |
2026-09-30T15:28:07.834Z |
|
cve-2026-13720
|
|
Editor can forge file-provisioning provenance on dashb…
|
Grafana
|
Grafana OSS
|
2026-09-30T11:06:38.177Z |
2026-09-30T15:28:07.969Z |
|
cve-2026-13719
|
|
Alert rules in restricted folders disclosed via the al…
|
Grafana
|
Grafana Enterprise
|
2026-09-30T11:06:38.172Z |
2026-09-30T14:29:13.891Z |
|
cve-2026-96342
|
6.9 (v4.0)
|
WordPress WPMobile.App plugin <= 11.83 - Sensitive Dat…
|
Amauri.IO
|
WPMobile.App
|
2026-09-30T11:00:18.127Z |
2026-09-30T13:37:20.706Z |
|
cve-2026-103113
|
|
OS4ED openSIS-Classic General Information Tab Student.…
|
OS4ED
|
openSIS-Classic
|
2026-09-30T10:30:08.940Z |
2026-10-01T15:26:08.502Z |
|
cve-2026-103239
|
8.6 (v4.0)
|
MISP Tag Collection Save Allows Privilege Escalation v…
|
MISP
|
MISP
|
2026-09-30T10:16:18.835Z |
2026-09-30T16:50:57.400Z |
|
cve-2026-103237
|
8.3 (v4.0)
|
MISP: Nested Model Alias Key Bypasses Sanitization to …
|
MISP
|
MISP
|
2026-09-30T09:56:35.584Z |
2026-09-30T17:08:51.346Z |
|
cve-2026-77185
|
9.1 (v3.1)
|
Apache MINA SSHD: Asynchronous authentication can bypa…
|
Apache Software Foundation
|
Apache MINA SSHD
|
2026-09-30T09:47:03.852Z |
2026-09-30T16:52:13.274Z |
|
cve-2026-93994
|
8.1 (v3.1)
|
Apache MINA SSHD: Repeated-publickey policy bypass on server
|
Apache Software Foundation
|
Apache MINA SSHD
|
2026-09-30T09:45:32.561Z |
2026-09-30T14:29:38.124Z |
|
cve-2026-94053
|
9.1 (v3.1)
|
Apache MINA SSHD: LDAP injection in sshd-ldap
|
Apache Software Foundation
|
Apache MINA SSHD
|
2026-09-30T09:43:47.477Z |
2026-09-30T14:30:10.327Z |